Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a DCheck if you run itEPSS 0.25%Jul 11, 2025
- High8.7A vulnerability was found in Tenda FH451 up to 1.0.0.9 and classified as critical.Check if you run itEPSS 0.98%Jul 11, 2025
- Critical9.8Fortinet FortiWeb SQL Injection VulnerabilityPatch nowKEVEPSS 99.92%Jul 11, 2025
- Medium5.3A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack.Check if you run itEPSS 5.68%Jul 10, 2025
- Medium4.1Meshtastic is an open source mesh networking solution.Check if you run itEPSS 0.39%Jul 10, 2025
- High7.5cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.59%Jul 10, 2025
- Critical9.3An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint.Check if you run itEPSS 6.22%Jul 10, 2025
- Medium4.3An issue has been discovered in GitLab EE affecting all versions from 13.3 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that could have allowed authenticated projectCheck if you run itEPSS 0.35%Jul 10, 2025
- Low2.7An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated maintainers to bypass group-leCheck if you run itEPSS 0.36%Jul 10, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rq_list in aoedev_downdev() An aoe device's rq_list contains accepted block requests that areCheck if you run itEPSS 0.22%Jul 10, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of has_locked_children() may_decode_fh() is calling has_locked_children() whileCheck if you run itEPSS 0.14%Jul 10, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash Currently, we encounter the followiCheck if you run itEPSS 0.22%Jul 10, 2025
- Unknownpluginrx broken_link_notifier Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.72%Jul 10, 2025
- Critical9.1Folo organizes feeds content into one timeline.Check if you run itEPSS 0.35%Jul 9, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: sanitize request list handling Validate the request in nvme_tcp_handle_r2t() to ensure it's not part oCheck if you run itEPSS 0.34%Jul 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in vhci_flush() without rCheck if you run itEPSS 0.18%Jul 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix invalid node index On a system with DRAM interleave enabled, out-of-bound access is deteCheck if you run itEPSS 0.18%Jul 9, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out When both the RHBA and RPA FDMI requests timeCheck if you run itEPSS 0.21%Jul 9, 2025
- Critical10.0An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crCheck this weekEPSS 16.38%Jul 9, 2025
- High7.5Zimbra Collaboration (ZCS) before 9.0.0 Patch 46, 10.0.x before 10.0.15, and 10.1.x before 10.1.9 is vulnerable to a denial of service condition due to improper handling of excessiCheck if you run itEPSS 1.61%Jul 9, 2025
- UnknownInsertion of Sensitive Information into Externally-Accessible File or DirectoryPatch nowKEVEPSS 46.63%Jul 9, 2025
- High7.5IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading servicCheck if you run itEPSS 0.42%Jul 8, 2025
- Medium6.2ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read.Check if you run itEPSS 0.44%Jul 8, 2025
- High8.2A vulnerability has been identified in the Now Platform that could result in data being inferred without authorization.Check if you run itEPSS 1.68%Jul 8, 2025
- Medium4.1SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration.Check if you run itEPSS 0.27%Jul 8, 2025
Sort